CVE-2022-45045
High
Description
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated attacker, possibly using the default admin:tlJwpbo6 credentials, can connect to port 34567 and execute arbitrary operating system commands via a crafted JSON file during an upgrade request. Since at least 2021, Xiongmai has applied patches to prevent attackers from using this mechanism to execute telnetd.
SeverityHigh
CVSS8.8
Exploit probability84. percentile2.4%
ProductXiongmaitech Mbd6304t
PublishedDec 1, 2022
First seenDec 1, 2022
Weakness typeCWE-78OS command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xiongmaitech mbd6304t | No range specified | — |
| xiongmaitech nbd6808t-pl | No range specified | — |
| xiongmaitech nbd7004t-p | No range specified | — |
| xiongmaitech nbd7008t-p | No range specified | — |
| xiongmaitech nbd7016t-f-v2 | No range specified | — |
| xiongmaitech nbd7024h-p | No range specified | — |
| xiongmaitech nbd7024t-p | No range specified | — |
| xiongmaitech nbd7804r-f\(ep\) | No range specified | — |
| xiongmaitech nbd7804r-f\(hdmi\) | No range specified | — |
| xiongmaitech nbd7804r-fw | No range specified | — |
| xiongmaitech nbd7804t-pl | No range specified | — |
| xiongmaitech nbd7808r-pl\(ep\) | No range specified | — |
| xiongmaitech nbd7808r-pl\(hdmi\) | No range specified | — |
| xiongmaitech nbd7808t-pl | No range specified | — |
| xiongmaitech nbd7904r-fs | No range specified | — |
| xiongmaitech nbd7904t-p | No range specified | — |
| xiongmaitech nbd7904t-pl | No range specified | — |
| xiongmaitech nbd7904t-pl-xpoe | No range specified | — |
| xiongmaitech nbd7904t-plc-xpoe | No range specified | — |
| xiongmaitech nbd7904t-q | No range specified | — |
| xiongmaitech nbd7908t-q | No range specified | — |
| xiongmaitech nbd8004r-pl\(ep\) | No range specified | — |
| xiongmaitech nbd8004r-yl\(ep\) | No range specified | — |
| xiongmaitech nbd8004t-q | No range specified | — |
| xiongmaitech nbd8008r-pl | No range specified | — |
| xiongmaitech nbd8008r-pl\(ep\) | No range specified | — |
| xiongmaitech nbd8008r-yl\(ep\) | No range specified | — |
| xiongmaitech nbd8008ra-gl | No range specified | — |
| xiongmaitech nbd8008ra-glk | No range specified | — |
| xiongmaitech nbd8008ra-ul\(ep\) | No range specified | — |
| xiongmaitech nbd8008ra-ula | No range specified | — |
| xiongmaitech nbd8008ra-ulk | No range specified | — |
| xiongmaitech nbd8008t-q | No range specified | — |
| xiongmaitech nbd8009s-ula-v2 | No range specified | — |
| xiongmaitech nbd8010s-kl-v2 | No range specified | — |
| xiongmaitech nbd8016r-ul | No range specified | — |
| xiongmaitech nbd8016ra-k\(ep\) | No range specified | — |
| xiongmaitech nbd8016ra-ul | No range specified | — |
| xiongmaitech nbd8016ra-ul\(ep\) | No range specified | — |
| xiongmaitech nbd8016ra-ula | No range specified | — |
| xiongmaitech nbd8016ra-ulk | No range specified | — |
| xiongmaitech nbd8016s-kl-v2 | No range specified | — |
| xiongmaitech nbd8016s-ula-v2 | No range specified | — |
| xiongmaitech nbd8016t-q-v2 | No range specified | — |
| xiongmaitech nbd8025r-ul | No range specified | — |
| xiongmaitech nbd8032h4-p | No range specified | — |
| xiongmaitech nbd8032h4-q | No range specified | — |
| xiongmaitech nbd8032h4-qe | No range specified | — |
| xiongmaitech nbd8032h4-ul | No range specified | — |
| xiongmaitech nbd8032h8-p | No range specified | — |
| xiongmaitech nbd8032h8-qe | No range specified | — |
| xiongmaitech nbd8032ra-ul-v2 | No range specified | — |
| xiongmaitech nbd8064h8-p | No range specified | — |
| xiongmaitech nbd80n16ra-kl | No range specified | — |
| xiongmaitech nbd80n16ra-kl\(ep\) | No range specified | — |
| xiongmaitech nbd80s08s-kl\(ep\) | No range specified | — |
| xiongmaitech nbd80s10s-kl | No range specified | — |
| xiongmaitech nbd80s16s-kl | No range specified | — |
| xiongmaitech nbd80s16s-kl\(ep\) | No range specified | — |
| xiongmaitech nbd80x09ra-kl | No range specified | — |
| xiongmaitech nbd80x09s-kl | No range specified | — |
| xiongmaitech nbd88x09s-kl | No range specified | — |
| xiongmaitech nbd8904r-pl | No range specified | — |
| xiongmaitech nbd8904r-yl | No range specified | — |
| xiongmaitech nbd8904t-gsc-xpoe | No range specified | — |
| xiongmaitech nbd8904t-q | No range specified | — |
| xiongmaitech nbd8908r-pl | No range specified | — |
| xiongmaitech nbd8908r-yl | No range specified | — |
| xiongmaitech nbd8908t-pl-xpoe | No range specified | — |
| xiongmaitech nbd8908t-plc-xpoe | No range specified | — |
| xiongmaitech nbd8916f4-q | No range specified | — |
| xiongmaitech nbd8916f8-q | No range specified | — |
| xiongmaitech mbd6304t_firmware | 4.02.r11.00000117.10001.131900.00000 | — |
| xiongmaitech nbd6808t-pl_firmware | 4.02.r11.c7431119.12001.130000.00000 | — |
| xiongmaitech nbd7004t-p_firmware | No range specified | — |
| xiongmaitech nbd7008t-p_firmware | No range specified | — |
| xiongmaitech nbd7016t-f-v2_firmware | No range specified | — |
| xiongmaitech nbd7024h-p_firmware | No range specified | — |
| xiongmaitech nbd7024t-p_firmware | No range specified | — |
| xiongmaitech nbd7804r-f\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd7804r-f\(hdmi\)_firmware | No range specified | — |
| xiongmaitech nbd7804r-fw_firmware | No range specified | — |
| xiongmaitech nbd7804t-pl_firmware | No range specified | — |
| xiongmaitech nbd7808r-pl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd7808r-pl\(hdmi\)_firmware | No range specified | — |
| xiongmaitech nbd7808t-pl_firmware | No range specified | — |
| xiongmaitech nbd7904r-fs_firmware | No range specified | — |
| xiongmaitech nbd7904t-p_firmware | No range specified | — |
| xiongmaitech nbd7904t-pl_firmware | No range specified | — |
| xiongmaitech nbd7904t-pl-xpoe_firmware | No range specified | — |
| xiongmaitech nbd7904t-plc-xpoe_firmware | No range specified | — |
| xiongmaitech nbd7904t-q_firmware | No range specified | — |
| xiongmaitech nbd7908t-q_firmware | No range specified | — |
| xiongmaitech nbd8004r-pl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8004r-yl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8004t-q_firmware | No range specified | — |
| xiongmaitech nbd8008r-pl_firmware | No range specified | — |
| xiongmaitech nbd8008r-pl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8008r-yl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8008ra-gl_firmware | No range specified | — |
| xiongmaitech nbd8008ra-glk_firmware | No range specified | — |
| xiongmaitech nbd8008ra-ul\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8008ra-ula_firmware | No range specified | — |
| xiongmaitech nbd8008ra-ulk_firmware | No range specified | — |
| xiongmaitech nbd8008t-q_firmware | No range specified | — |
| xiongmaitech nbd8009s-ula-v2_firmware | No range specified | — |
| xiongmaitech nbd8010s-kl-v2_firmware | No range specified | — |
| xiongmaitech nbd8016r-ul_firmware | No range specified | — |
| xiongmaitech nbd8016ra-k\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8016ra-ul_firmware | No range specified | — |
| xiongmaitech nbd8016ra-ul\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd8016ra-ula_firmware | No range specified | — |
| xiongmaitech nbd8016ra-ulk_firmware | No range specified | — |
| xiongmaitech nbd8016s-kl-v2_firmware | No range specified | — |
| xiongmaitech nbd8016s-ula-v2_firmware | No range specified | — |
| xiongmaitech nbd8016t-q-v2_firmware | No range specified | — |
| xiongmaitech nbd8025r-ul_firmware | No range specified | — |
| xiongmaitech nbd8032h4-p_firmware | No range specified | — |
| xiongmaitech nbd8032h4-q_firmware | No range specified | — |
| xiongmaitech nbd8032h4-qe_firmware | No range specified | — |
| xiongmaitech nbd8032h4-ul_firmware | No range specified | — |
| xiongmaitech nbd8032h8-p_firmware | No range specified | — |
| xiongmaitech nbd8032h8-qe_firmware | No range specified | — |
| xiongmaitech nbd8032ra-ul-v2_firmware | No range specified | — |
| xiongmaitech nbd8064h8-p_firmware | No range specified | — |
| xiongmaitech nbd80n16ra-kl_firmware | No range specified | — |
| xiongmaitech nbd80n16ra-kl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd80s08s-kl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd80s10s-kl_firmware | No range specified | — |
| xiongmaitech nbd80s16s-kl_firmware | No range specified | — |
| xiongmaitech nbd80s16s-kl\(ep\)_firmware | No range specified | — |
| xiongmaitech nbd80x09ra-kl_firmware | No range specified | — |
| xiongmaitech nbd80x09s-kl_firmware | No range specified | — |
| xiongmaitech nbd88x09s-kl_firmware | No range specified | — |
| xiongmaitech nbd8904r-pl_firmware | No range specified | — |
| xiongmaitech nbd8904r-yl_firmware | No range specified | — |
| xiongmaitech nbd8904t-gsc-xpoe_firmware | No range specified | — |
| xiongmaitech nbd8904t-q_firmware | No range specified | — |
| xiongmaitech nbd8908r-pl_firmware | No range specified | — |
| xiongmaitech nbd8908r-yl_firmware | No range specified | — |
| xiongmaitech nbd8908t-pl-xpoe_firmware | No range specified | — |
| xiongmaitech nbd8908t-plc-xpoe_firmware | No range specified | — |
| xiongmaitech nbd8916f4-q_firmware | No range specified | — |
| xiongmaitech nbd8916f8-q_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.